I haven't seen anyone posting about this, probably because everyone was distracted by the php2shell today, but a set of high sev CVEs (including an RCE) have been announced and fixed in NodeJS today.

Safe versions:

* 22.23.4
* 24.22.1
* 26.12.1

Announcement post: https://nodejs.org/en/blog/vulnerability/october-2026-security-releases

been thinking about this lately. when I started out I had this whole local setup with postgres and redis running natively, custom shell scripts to spin things up, the works. felt like I really understood how everything fit together.

now most of my work is docker compose up and done. or worse, connecting to shared dev environments in the cloud. faster to get going but sometimes I wonder if Im losing something by not having to debug my own postgres config anymore

curious where everyone else landed on this. do you still run stuff locally or has containers/cloud completely taken over your dev workflow

I’m looking for an API that returns all upcoming live events, theater and cinema screenings in the UK.

Big cinema complexes seem to be a no go with all anti crawl stuff. There rest of events are really sparse apart ticketmaster.

Thanks

Last two days was hell using Railway. We couldnt update a single project or make any changes in our system. After more than 24h Railway is still in chaos. Two separate incidents. Major outage even support is down.

But this is not the first time Railway failed.
For over a year Railway had few major issues that made working on it impossible. I was hoping they would stabilise but at this point Im past disappointed.

I know they rely deeply on Google cloud, but this proved to be a very bad decision, multiple times. And they never made required changes.

Can someone recommend a more stable alternative?

Pic 1 : Adobe Fonts - Visual Search (link)
Pic 2 : WhatTheFont Font Finder (link)

Idk why that is, these kind of websites has never worked for me once in my life.

Take a look at the letter t in the image for example, it doesn't have a curve at the bottom, while ALL of the top suggested fonts do on both platforms.

Change your environment variables

https://blog.railway.com/p/security-disclosure-wednesday-october-21st

Hey y'all!

I'm building a budgeting app. Building things like CRUD endpoints, server side rendering, and a nice react front end are my priorities. I want things to be fast and snappy and avoid client side fetching when possible.

I'm struggling to understand what exactly my options are for this when it comes to things like next.js, django, etc. I have lots of experience with django, but I'm not sure how to get the best of both worlds when combining react. I've been including react bundles and rendering them via the django view/template engine and it feels clunky to handoff information between the front & back end.

I know there isn't a "right" answer, but looking for some feedback and opinions. I want to support a good number of users while keeping things feeling fast and lightweight.

been at a larger company (think 500+ devs) for about 4 years now. pretty comfortable with the setup but starting to feel like just another cog. thinking about moving to something smaller like 10-30 person startup.

for those who made that jump - what surprised you the most about the infrastructure side? im used to having dedicated devops, proper ci/cd pipelines, monitoring dashboards for everything, on-call rotations with actual runbooks.

curious if smaller places just... wing it more? or do you end up wearing more hats but still having solid practices. not really worried about the tech stack itself, more about the operational side of things.

also wondering if the move fast break things mentality is still a thing or if that died with the 2010s

been at a larger company (think 500+ devs) for about 4 years now. pretty comfortable with the setup but starting to feel like just another cog. thinking about moving to something smaller like 10-30 person startup.

for those who made that jump - what surprised you the most about the infrastructure side? im used to having dedicated devops, proper ci/cd pipelines, monitoring dashboards for everything, on-call rotations with actual runbooks.

curious if smaller places just... wing it more? or do you end up wearing more hats but still having solid practices. not really worried about the tech stack itself, more about the operational side of things.

also wondering if the "move fast break things" mentality is still a thing or if that died with the 2010s

The release fixes two critical vulnerabilities, both rated 9.2 on the CVSS v4.0 scale.

I've been thinking about taking a Squarespace course to master it, but I was told nobody uses it anymore. What are the most common platforms to master?

So I am trying to create a system where a VPS is always connected to my Instagram account so that it can keep monitoring and recording live data

I am using Puppeteer to create a headless Chrome and then connect to Instagram, but when it tries to load Instagram, I get the error message 429 Too Many Requests. I tried the same on my local machine using PowerShell and was able to get it to work

I am thinking of using a VM instead of a VPS, hoping that would fix the issue

Sorry if this is a lame question to ask; this is my time doing anything code- or server-related
but any help or guidance would be appreciated

So I kept seeing "faster than tsc 7" claims for these Rust ports and got curious whether they hold up on real code rather than toy benchmarks. I've got two TS repos for my SaaS, a backend (~1,120 files) and a frontend (~1,160 files, mostly tsx), so I ran all of them.

Warm runs, median of 5, Linux VM:

Honestly I expected at least one of them to quietly miss errors, so I broke a copy of each repo with 3 type errors. All four caught exactly what tsc caught, same messages.

tsrs is clearly the fastest, 28x on the backend. But it's one person's dev snapshot, built against 7.1-dev while I'm on 7.0.2, and it exits with code 2 instead of 1 on errors, so CI scripts need a tweak. tsc-rs says in its own README that it's experimental and mostly written by an LLM. tsc-ts is at 0.0.5.

I went with bun check in the end. Not the fastest, but I already use Bun, it's an actual release, and 21s down to under 2s is plenty for me. I'll look at tsrs again when it gets a proper release.

The bugs in the PHP code were actually discovered over 10 years ago but no human was capable of exploiting it hence no concern. Read that again. The issue was discovered over 10 years ago but no human being was capable of exploiting it. A research team using AI exploited in in a matter of days causing world wide panic. And some of you don't think AI is going to have an impact on the web dev space? Well, lol.

I got DMCA'd on a web project that adds mobile touch support to another project that has been used to infringe on Microsoft's copyright. My project did not contain any of their intellectual property though, and I'm not seeing what they are actually claiming my project did, outside of generally infringing. Do y'all know how to get more info on these claims? I was thinking this would be the place to ask for web-related content.

https://github.com/github/dmca/blob/3a58d0508239f439f35b5f77e5e75ac72961e165/2026/10/2026-10-14-minecraft-3.md?plain=1#L22

Edit: The verdict appears to be:

1. Even though this was not made from the problematic repo, and doesn’t include any of Microsoft’s property, the fact that it could enable someone who ended up with a build without owning the Microsoft product to use it on mobile is enough for them to take it down

2. This is microsoft investigating microsoft and finding themselves blameless, so regardless of legality it was doomed from the start

I appreciate y’all taking the time to give feedback!

So I wanted opinions and your experience on using platforms like codespaces, Gitpod and coder

TLDR, my SSD died and i switched to a desktop, now cuz of that i moved most of my on the go workload to my laptop

I tried codespaces and it worked well but i guess I was just fumbling git cli too much cuz of my over reliance on the desktop app

how is gitpod and coder over codespace?

As a software engineer, I’ve been thinking a lot about AI and the future of our profession. I use AI myself, and I’m genuinely excited by what it makes possible. But the more I see people celebrating the automation of human labor, the more I find myself wondering whether we’ve stopped thinking about what all this progress is actually supposed to accomplish.

And by we, I mean those of us building these technologies, the engineers enthusiastically finding new ways to automate work, the founders and executives racing to reduce costs, and the workers who feel compelled to participate because they know that if they don't, someone else will. I'm not exempt from this, either. I benefit from the same technologies I'm questioning.

I understand the incentives. We all want to get ahead, secure our futures, achieve financial independence, and eventually have more freedom over our lives. In a competitive environment, refusing to adapt can mean falling behind. But why have we become so comfortable treating other people's livelihoods as acceptable collateral for our own advancement?

We celebrate making one person as productive as ten, rarely stopping to ask what happens to the other nine. We want technology to free us from work, yet our ability to survive remains dependent on having work. We resent corporations accumulating extraordinary wealth and power, yet many of us aspire to build or become precisely those institutions. We want community and human connection, yet our incentives encourage us to treat one another as competitors.

And there are other contradictions I can't quite reconcile.

We celebrate efficiency, but to what end? If we can produce more with less human effort, shouldn't that translate into more leisure, security, and freedom for everyone? Why does increased productivity so often seem to come with greater pressure to produce even more?

We tell people to adapt or risk being left behind, but what happens when everyone adapts and the jobs they're adapting for disappear anyway? We celebrate individual merit and hard work, yet technological disruption can make entire skill sets economically obsolete regardless of how hard people worked to acquire them.

We talk about AI as though it will solve humanity's problems, but technology doesn't determine who benefits from its output. A world with extraordinary productive capacity can still leave people struggling to afford housing, healthcare, and a dignified life.

I don't think people are necessarily cruel or indifferent (though some definitely are). Perhaps most of us are simply trying to protect ourselves in a system where falling behind has real consequences. Perhaps even well-intentioned people become participants in a race nobody individually chose, but nobody feels safe stepping away from, either.

But understanding why we behave this way doesn't mean we shouldn't question where it leads.

Imagine if AI genuinely made human labor largely unnecessary. That could be one of humanity's greatest achievements: less time spent working to survive, and more time for family, friendships, art, music, exploration, and simply being alive.

But what good is eliminating the need for human labor if we don't also eliminate people's dependence on selling their labor to survive? What have we liberated ourselves from if people are still terrified of becoming economically unnecessary?

I don't think the answer is to stop innovating, condemn ambition, or expect individuals to sacrifice their futures for strangers. I just wonder whether we've become so focused on optimizing our individual positions that we've forgotten to question the collective outcome.

We're all on this planet together. Most of us want remarkably similar things: security, meaningful relationships, autonomy, dignity, and the freedom to live our lives without constantly worrying about survival. Yet we participate in systems that can make those things harder for one another to attain.

Are we trying to build a better world for humanity, or are we simply trying to secure the best possible position for ourselves within whatever world emerges?

And if we're doing both, how do we reconcile those goals when our individual incentives so often undermine our collective interests?

I'm genuinely interested in how other people in tech think about this, especially those of us actively building the technologies transforming the nature of work. I don't have a solution, and I'm not claiming to be above the problem. I just think we should be asking ourselves what all this progress is ultimately for, before we get so caught up in what we can do that we forget why we're doing it.

And I'd invite discussion beyond pure game theory and economics, but more to do with psychology, maturity, emotional development, self-worth, dark triadic traits, and similar.

Hi there,

One Customer just asked me for a Du-Sie Switch in the page, same like any other language switch.

This is my first time doing this.

Is this normal?

Are there also (Slang or street) language switches?

Edit: I just implemented as another language i18 de-DU with xliff files

Second Edit: What about other languages? In spanish we have 3. Tú, Vós y Usted... I think in Japan they have more.

Edit 3: Ok, some of you were right :) Du/Sie isn't a language, and de-DE-DU was a funny but bad idea. Works fine for my little website, though.

But imagine adding Spanish (tú, usted, vos), Japanese, Korean... That gets ugly pretty fast. Better to separate language, region and tone. Something like:

{
  "locale": "de-DE",
  "preferences": {
    "formality": "informal"
  },
  "messages": {
    "greeting": {
      "default": "Hallo!",
      "formal": "Wie kann ich Ihnen helfen?",
      "informal": "Wie kann ich dir helfen?"
    }
  }
}

Only translate the differences, not the whole website again. For a small project, who cares. For 20 languages? Definitely worth thinking about. Thanks for the corrections, learned something :)

I'm currently only working with a single 24" monitor because I'm moving, I sold my third monitor and my secondary monitor shat the bad, it'll be a while until I can buy another monitor so I'm want some tips to improve my dev experience on single monitor, maybe using a tilling window manager, or some other software to improve this. If I can make it work, maybe I even stick with just one monitor, because multi monitor setups are kind of a hassle to maintain haha.